$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa File: f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa (raw, json) Hash identifier: oZw6hyU3Wx/rBkfEuIUyvwobYgVJmi2RMDyhyD1YFNE= Subject key identifier: 2F:4A:F5:EF:BF:6E:3F:88:27:63:41:02:8E:A0:17:C6:1F:5B:7D:0F Certificate issuer: /CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054 Certificate serial: 010D0C9F4328584DCF2B1C5605AF8062EA9FF500 Authority key identifier: AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 401413 IP address blocks: 209.23.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:1c:56:05:af:80:62:ea:9f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054 Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=d3cb0bcc-1849-4fd4-b5ca-1afbe99858ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:da:96:4b:e8:7e:30:2c:03:42:50:f5:7a: c7:63:9e:ad:03:3c:6e:87:e8:2f:aa:83:13:cb:9f: f6:95:36:70:f4:d8:76:15:3c:d5:a6:6a:0b:4a:26: 92:ff:5e:51:8f:37:00:c6:56:15:e6:f6:34:d9:82: d8:a7:99:24:87:bd:4f:e7:19:33:82:ae:b4:9e:01: 2d:21:eb:f2:84:b5:8b:ea:49:8c:f3:ca:fd:72:c7: f7:a7:07:de:16:96:93:f2:19:ce:48:75:c8:d1:2b: c7:bd:e4:29:47:1d:e2:02:0b:26:98:d5:58:ed:90: 69:cc:f9:00:37:e1:29:3c:70:df:04:97:b7:8e:2f: 96:c3:07:4c:70:26:55:3b:43:a1:db:03:ab:25:48: f2:5f:44:ae:b7:9c:8a:9a:7e:ad:e5:2e:ce:27:3c: 97:a0:dd:c2:bf:39:61:70:44:f2:bb:01:f9:a0:8f: 37:07:df:b2:78:ea:5a:55:1d:e0:be:d3:9d:c4:bb: 31:92:31:79:cd:52:a4:a1:84:f3:11:38:72:0e:d8: 7f:de:5d:5f:7f:0e:55:71:96:5b:5b:58:57:41:07: 83:17:bd:e5:f1:da:6d:c1:57:77:49:e1:4f:f0:a6: 90:9f:0e:92:71:ee:26:e4:2e:9a:67:ee:41:b0:7b: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4A:F5:EF:BF:6E:3F:88:27:63:41:02:8E:A0:17:C6:1F:5B:7D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl X509v3 Authority Key Identifier: keyid:AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer sbgp-ipAddrBlock: critical IPv4: 209.23.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d6:15:d3:b1:2e:65:ea:0c:37:8f:98:9e:a4:69:e6:2b:52: 86:17:6f:91:aa:3b:84:08:22:61:c7:8f:9f:a4:4f:e1:d5:57: 1f:44:4a:d7:9c:ab:bc:df:b7:c8:bf:66:38:5e:05:e3:fd:c4: 37:bb:14:ce:b8:a3:d5:46:ba:a2:bc:a7:91:55:04:0e:8b:72: 71:63:5f:fe:97:3f:e5:6e:45:a5:18:c1:08:c2:1d:20:bc:06: 96:d5:4e:14:17:86:78:88:01:7d:19:fb:f6:8e:88:93:1f:43: 4b:ed:15:b1:ef:1a:95:5c:cb:b6:9b:16:b6:b9:db:39:68:45: 25:38:44:48:6f:c1:8f:0d:cb:91:af:c8:20:fd:58:f3:25:6a: 37:f4:f4:bb:1c:af:28:7b:6a:96:3b:3a:5e:24:4c:f0:5c:05: 70:f8:42:f2:f6:85:56:45:18:3c:3e:ec:7d:2e:c7:ce:b4:78: f3:c7:69:58:81:66:9e:9f:60:fa:07:cc:48:95:f7:6c:d6:b4: 8f:23:df:04:07:99:98:11:b7:f8:af:71:ff:91:cb:d3:bd:97: 64:d8:9a:1f:75:7b:d5:cd:07:3d:79:86:3c:e6:00:0e:93:64: 00:2d:b9:38:45:16:3c:ff:47:5b:04:69:3f:62:33:b1:29:38: c7:f5:fa:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKxxWBa+AYuqf9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxYWI0MTAtY2NiZC00YWMzLThiNGUtNGIzYzlhMTE5 MDU0MB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk ZDNjYjBiY2MtMTg0OS00ZmQ0LWI1Y2EtMWFmYmU5OTg1OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldvalkvofjAsA0JQ9XrHY56tAzxuh+gvqoMT y5/2lTZw9Nh2FTzVpmoLSiaS/15RjzcAxlYV5vY02YLYp5kkh71P5xkzgq60ngEt IevyhLWL6kmM88r9csf3pwfeFpaT8hnOSHXI0SvHveQpRx3iAgsmmNVY7ZBpzPkA N+EpPHDfBJe3ji+WwwdMcCZVO0Oh2wOrJUjyX0Sut5yKmn6t5S7OJzyXoN3Cvzlh cETyuwH5oI83B9+yeOpaVR3gvtOdxLsxkjF5zVKkoYTzEThyDth/3l1ffw5VcZZb W1hXQQeDF73l8dptwVd3SeFP8KaQnw6Sce4m5C6aZ+5BsHvdowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9K9e+/bj+IJ2NBAo6gF8YfW30PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzFh YjQxMC1jY2JkLTRhYzMtOGI0ZS00YjNjOWExMTkwNTQvZjQxZTZiODQtOTg4Yi0z ZDQzLTk1YmItNGRiZjBjYzkzYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjcxYWI0MTAtY2NiZC00YWMzLThi NGUtNGIzYzlhMTE5MDU0L2Y3MWFiNDEwLWNjYmQtNGFjMy04YjRlLTRiM2M5YTEx OTA1NC5jcmwwHwYDVR0jBBgwFoAUrLiPuTVVe52LyV5v6D8Bqncc8nUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzFhYjQxMC1jY2JkLTRhYzMtOGI0ZS00YjNj OWExMTkwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0RdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHWFdOxLmXqDDePmJ6kaeYrUoYXb5GqO4QIImHHj5+kT+HVVx9EStec q7zft8i/ZjheBeP9xDe7FM64o9VGuqK8p5FVBA6LcnFjX/6XP+VuRaUYwQjCHSC8 BpbVThQXhniIAX0Z+/aOiJMfQ0vtFbHvGpVcy7abFra52zloRSU4REhvwY8Ny5Gv yCD9WPMlajf09Lscryh7apY7Ol4kTPBcBXD4QvL2hVZFGDw+7H0ux860ePPHaViB Zp6fYPoHzEiV92zWtI8j3wQHmZgRt/ivcf+Ry9O9l2TYmh91e9XNBz15hjzmAA6T ZAAtuThFFjz/R1sEaT9iM7EpOMf1+sw= -----END CERTIFICATE-----Generated at Wed May 13 01:20:52 2026 by rpki-client